<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
<html><head>
<title>Cyrus SASL library</title>
</head>
<body>
<h1>Cyrus SASL library, version 2</h1>

<p>SASL (Simple Authentication Security Layer) is an Internet
standards-track method for remote computers to authenticate.  The
Cyrus SASL library makes supporting various SASL mechanisms easy for
both client and server writers.</p>

<p>The Cyrus project is the implementation of an enterprise mail
system by the Carnegie Mellon University Computing Services Department.
We are interested in scalable, easy to administer systems.</p>

<h2>The Cyrus SASL library distribution</h2>

<p><a href="https://www.cyrusimap.org/sasl/download.html"><b>Cyrus SASL
library distribution</b></a>

<h2>Documentation</h2>

<ul>
  <li> <a href="readme.html"><b>Read Me First</b></a></li>
  <li> <a href="install.html"><b>Installation Documentation</b></a></li>
  <li> <a href="upgrading.html"><b>Information for upgrading from SASLv1</b></a></li>
  <li> <a href="appconvert.html"><b>SASLv1 to SASLv2 Application Conversion Guide</b></a></li>
</ul>

<ul>
  <li> <a href="components.html">A high-level overview of Cyrus SASL Components</a></li>
  <li> <a href="sysadmin.html">The Cyrus SASL for System Administrators</a></li>
  <li> <a href="options.html">Options for use with Cyrus SASL</a></li>
  <li> <a href="programming.html">The SASL Application Programmer's Guide</a></li>
  <li> <a href="plugprog.html">The SASL Plugin Programmer's Guide</a></li>
  <li> <a href="advanced.html">Advanced SASL usage</a></li>
</ul>

<b>Special Platforms</b>
<ul>
  <li> <a href="macosx.html"><b>Mac OS X Build Guide</b></a>
  <li> <a href="os390.html"><b>OS/390 Build Guide</b></a>
  <li> <a href="windows.html"><b>Win32 Build Guide</b></a>
</ul>

<b>RFCs and drafts</b>

<ul>
  <li><a href="https://tools.ietf.org/html/rfc1939#page-15">
    Post Office Protocol - Version 3 (POP3): APOP Command</a>
  <li><a href="https://tools.ietf.org/html/rfc2222#section-7.1">
    Kerberos Version 4 SASL Mechanism</a></li>
  <li><a href="https://tools.ietf.org/html/rfc2444">
    The One-Time-Password SASL Mechanism</a></li>
  <li><a href="https://tools.ietf.org/html/rfc2808">
    The SecurID(r) SASL Mechanism</a></li>
  <li><a href="https://tools.ietf.org/html/rfc2831">
    Using Digest Authentication as a SASL Mechanism</a>
  (<a href="https://tools.ietf.org/html/rfc6331">Historic</a>)</li>
  <li><a href="https://tools.ietf.org/html/rfc4422">
    Simple Authentication and Security Layer (SASL)</a></li>
  <li><a href="https://tools.ietf.org/html/rfc4505">
    Anonymous Simple Authentication and Security Layer (SASL) Mechanism</a></li>
  <li><a href="https://tools.ietf.org/html/rfc4616">
    The PLAIN Simple Authentication and Security Layer (SASL) Mechanism</a></li>
  <li><a href="https://tools.ietf.org/html/rfc4648#section-4">
    Base64 Data Encoding</a></li>
  <li><a href="https://tools.ietf.org/html/rfc4752">
    The Kerberos V5 ("GSSAPI") Simple Authentication and Security Layer (SASL) Mechanism</a></li>
  <li><a href="https://tools.ietf.org/html/rfc5801">
    Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in SASL: The GS2 Mechanism Family</a></li>
  <li><a href="https://tools.ietf.org/html/rfc5802">
    Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms</a></li>
  <li><a href="https://tools.ietf.org/html/rfc5803">
    Lightweight Directory Access Protocol (LDAP) Schema for Storing Salted: Challenge Response Authentication Mechanism (SCRAM) Secrets</a></li>
  <li><a href="https://tools.ietf.org/html/rfc5929">
    Channel Bindings for TLS</li>
  <li><a href="https://tools.ietf.org/html/rfc7613">
    Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords</a></li>
  <li><a href="https://tools.ietf.org/html/rfc7677">
    SCRAM-SHA-256 and SCRAM-SHA-256-PLUS: Simple Authentication and Security Layer SASL) Mechanisms</a></li>
  <li><a href="https://tools.ietf.org/html/rfc7804">
    Salted Challenge Response HTTP Authentication Mechanism</a></li>
  <li><a href="https://tools.ietf.org/html/draft-burdis-cat-srp-sasl">
    Secure Remote Password Authentication Mechanism</a></li>
  <li><a href="https://tools.ietf.org/html/draft-murchison-sasl-login">
    The LOGIN SASL Mechanism</a></li>
  <li><a href="https://tools.ietf.org/html/draft-nerenberg-sasl-crammd5">
    The CRAM-MD5 SASL Mechanism</a></li>
  <li><a href="https://tools.ietf.org/html/draft-newman-sasl-c-api">
    Simple Authentication and Security Layer C API</a></li>
  <li><a href="https://tools.ietf.org/html/draft-newman-sasl-passdss">
    DSS Secured Password Authentication Mechanism</a></li>
</ul>

<b>Other Documentation & Resources</b>
<ul>
  <li><a href="http://www.oreillynet.com/pub/a/network/2002/04/09/sasl.html">
    Using SASL: Pluggable Security</a></li>
  <li><a href="http://www.oreillynet.com/pub/a/network/2002/04/30/sasl2.html">
    Using SASL: CMU's Cyrus SASL Library</a></li>
  <li><a href="http://www.melnikov.ca/mel/devel/SASL_info.html">
    Information on SASL mechanisms, profiles, servers and clients implementing SASL</a></li>
  <li><a href="http://www.sendmail.org/~ca/email/auth.html">FAQ</a>
    from Sendmail</li>
  <li><a href="http://www-cs-students.stanford.edu/~tjw/srp/ndss.html">
    The Secure Remote Password Protocol</a> paper by Thomas Wu</li>
  <li><a href="http://beepcore-tcl.sourceforge.net/tclsasl.html">
    TCL extensions for SASL</a></li>
  <li><a href="http://davenport.sourceforge.net/ntlm.html">
    The NTLM Authentication Protocol</a> (NTLM)</li>
  <li><a href="http://www.snia.org/tech_activities/CIFS/CIFS-TR-1p00_FINAL.pdf">
    Common Internet File System (CIFS) Technical Reference</a> (SMB/NTLM)</li>
</ul>

<p><hr><p>
<a href="https://www.cyrusimap.org/sasl/">Go</a> to the Project Cyrus Home Page<br>
<a href="http://www.andrew.cmu.edu/">Go</a> to the Andrew Systems Group homepage
</body>
